ISTQB® Certified Tester Security Tester (CT-SEC)

The Security Testing Curriculum empowers professionals to plan, conduct, and evaluate security tests from multiple perspectives—risk, requirements, vulnerabilities, and human factors. It also addresses security testing tools and standards. Ideal for testers, QA specialists, and developers seeking expertise in software security.

The components of the Certified Tester - Security Tester are:

• Fundamentals of security testing and organizational context
• Risk-driven test planning and analysis
• Security test design, execution, evaluation, and maintenance
• Security throughout the SDLC
• Testing security controls: hardening, authentication/authorization, encryption, firewalls, intrusion detection, malware scanning, data obfuscation
• Human aspects: social engineering, attacker perspectives, security awareness
• Security test reporting and result evaluation
• Security testing tools and standards, including tool selection and industry trends

Prerequisites

• Must hold the ISTQB® Foundation Level (CT‑FL) certification
• Must have ≥ 3 years of experience in academic, practical, or consulting roles related to testing (including security)

Exam Highlights

• Questions: 45 multiple-choice
• Duration: 120 minutes (+ 25% extra for non-native speakers = 150 minutes)
• Passing Score: 65% (minimum 52/80 points)

Exam Preparation

• ISTQB CT‑SEC Syllabus v1.0 (2016) ⤴
• ISTQB CT‑SEC Sample Exam A – Questions v1.1 ⤴
• ISTQB CT‑SEC Sample Exam A – Answers v1.1 ⤴